All geek questions in one place

Does the asp.net account password write the password field?

I am setting up my first site using the asp authentication provider and using the asp.net built-in access control.

My question is, is the password encrypted or hashed when it is sent to the server using asp.net access control? or do i need to use https / ssl to accomplish this?

thank

+3
source share
4 answers

Navigate using HTTPS.

Per MSDN : "By default, ASP.NET access controls work in text over HTTP. If you are concerned about security, use HTTPS with SSL encryption."

+7
source

HTTPS, . ASP.Net HTML, , , . SSL/HTTPS, , .

+1

Logon control works like regular mail. There is no encryption or request-response method. You must use SSL if you want any security.

+1
source

All text data is sent as is on the server, regardless of the language used by the server, since this is controlled by the HTML Framework. You can create an encryption algorithm or a Javascript hash and use it before submitting the form data.

However, the safest way is to use HTTPS.

0
source

Source: https://habr.com/ru/post/1698541/

More articles:


All Articles